Reputation, regulation, and risk: When facility conditions trigger public-sector lawsuits